
$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer
File: BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer (raw, json)
Hash identifier: /7ia4oEOzLk74p6O9FOQg+qDcgncRbAHaNNxus6yiB8=
Subject key identifier: BF:9D:E8:FB:49:F6:31:4B:6E:D2:E7:AC:94:3C:9C:BF:93:B4:A8:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 54DD801A64AAAAD969806932ADC452689E16A675
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft
caRepository: rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 28 Aug 2026 16:13:35 +0000
Certificate not after: Fri 27 Aug 2027 16:18:35 +0000
Subordinate resources: AS: 275839
IP: 2804:9a54::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Oct 2026 17:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:dd:80:1a:64:aa:aa:d9:69:80:69:32:ad:c4:52:68:9e:16:a6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 28 16:13:35 2026 GMT
Not After : Aug 27 16:18:35 2027 GMT
Subject: CN=BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:55:71:8c:6b:77:86:8d:22:b9:92:98:1c:
a6:b3:77:37:9a:62:bf:61:c1:a9:2c:20:d5:0a:fc:
58:11:73:01:57:f1:b9:ee:1c:69:49:c0:4a:82:75:
ce:31:8a:18:17:8d:e7:17:bc:57:1a:f3:5a:ba:ac:
0e:1b:66:a4:bb:b6:17:7f:a0:c9:42:be:03:c0:8d:
2d:6d:d1:81:54:a4:ad:30:7a:56:42:d1:30:b9:c6:
ae:58:bf:b5:8f:c3:07:6a:4b:18:46:95:56:9e:9e:
49:e2:e2:66:9f:66:ba:f5:d5:93:81:43:62:a5:03:
97:6c:d7:96:27:8a:01:0f:48:b1:27:d3:d7:84:d3:
98:5a:3b:c2:58:e3:ea:30:73:3b:22:06:cc:62:ca:
50:1b:5e:8e:dc:3d:37:13:fa:29:03:2a:07:ad:7a:
ef:12:f7:16:ad:5a:4c:e6:ef:ca:6b:ed:10:1a:65:
3e:c2:3f:c2:0b:17:fd:12:a5:12:e8:ef:ef:59:3e:
50:fc:7d:89:ac:2d:f6:ef:a5:2f:bc:c4:33:5f:b5:
14:65:06:05:ab:39:50:04:e4:54:ba:be:e2:7d:b9:
66:3c:df:26:87:01:1e:cf:07:57:ce:f5:b7:7d:74:
3d:07:9f:49:a0:0f:97:d8:79:ef:61:63:b5:e7:56:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:9D:E8:FB:49:F6:31:4B:6E:D2:E7:AC:94:3C:9C:BF:93:B4:A8:25
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9a54::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
275839
Signature Algorithm: sha256WithRSAEncryption
11:56:ba:41:2b:40:5b:6d:92:6c:61:dd:dd:ac:80:f6:04:61:
58:38:62:69:29:09:b4:80:75:b9:f1:ca:bb:88:ca:6c:a3:b0:
1a:0e:05:db:8a:51:5a:ab:06:47:8e:47:38:e5:07:63:50:3e:
bb:5b:49:82:cf:4b:79:1a:95:1a:94:20:2b:8a:93:48:0d:e6:
0e:0f:b7:60:b9:3c:1e:d0:c0:72:85:50:43:e5:24:b2:e4:f4:
26:22:21:88:fa:ab:04:77:0c:6e:76:05:8a:be:71:21:13:d0:
1a:25:c8:3f:2a:b1:20:d8:12:02:1b:c9:3a:67:58:76:d2:98:
81:f9:fa:0f:91:9c:aa:67:92:95:e6:28:6d:2c:a8:b5:b9:00:
b1:41:47:2b:04:19:a3:df:4d:66:47:3a:c1:a8:5f:0a:7d:d3:
e5:43:91:88:78:cd:29:26:46:b7:d4:a7:b9:21:03:11:f9:29:
fe:54:77:8a:6c:0f:68:1d:59:eb:52:ae:b6:01:e9:10:71:44:
3d:cd:65:dc:7e:d0:71:79:3f:7d:59:4d:37:19:7a:6b:95:d7:
cf:4a:69:b1:ee:07:cc:e9:ed:84:fa:c5:e0:ca:ef:72:e0:d5:
e1:46:4b:48:c1:9d:05:42:a8:9e:64:84:aa:0a:30:89:95:2d:
e3:84:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:42:22 2026 by rpki-client